Read the docs

ratify-project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ratify-project records in CISA KEV

No ratify-project vulnerabilities are listed in CISA KEV.

Records

1 record

Priority LOW 32

Ratify is a verification engine as a binary executable and on Kubernetes which enables verification of artifact security metadata and admits for deployment only those that comply with policies the user creates.

CVSS 4.0HIGH 7.2 Network No auth User interaction EPSS 0.00481 Published 2025-03-11 Fixed in 1.2.3, 1.3.2 CWE-287
Open these records in search →